Skip to content

build(deps-dev): bump the lint-toolchain group with 6 updates#1007

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lint-toolchain-ceda8f588f
Open

build(deps-dev): bump the lint-toolchain group with 6 updates#1007
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lint-toolchain-ceda8f588f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the lint-toolchain group with 6 updates:

Package From To
eslint 9.39.2 10.7.0
lint-staged 16.2.7 17.1.0
markdownlint-cli 0.47.0 0.49.1
npm-package-json-lint 9.1.0 10.4.1
prettier 3.9.4 3.9.5
stylelint 17.14.0 17.14.1

Updates eslint from 9.39.2 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

  • cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
  • f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
  • 557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
  • 0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
  • 96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

  • 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
  • 0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
  • 75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
  • b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
  • e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
  • a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
  • d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
  • 8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
  • a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
  • 8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

  • c30d808 docs: Update README (GitHub Actions Bot)
  • 5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
  • 04174cb docs: Update README (GitHub Actions Bot)
  • 026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
  • 9d42fef docs: Update README (GitHub Actions Bot)
  • b230159 docs: Update README (GitHub Actions Bot)
  • 0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

  • 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
  • 81a4774 chore: updates for v9.39.5 release (Jenkins)
  • 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
  • 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
  • 833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
  • 7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
  • 8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
  • e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
  • 0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
  • 1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
  • 4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
  • 993539f chore: update dependency @​eslint/json to ^2.0.1 (#21042) (renovate[bot])
  • 53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
  • 5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
  • a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
  • 7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

v10.6.0

Features

  • b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

... (truncated)

Commits
  • fabd99b 10.7.0
  • 37c5e75 Build: changelog update for 10.7.0
  • 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076)
  • 81a4774 chore: updates for v9.39.5 release
  • 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
  • 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071)
  • cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032)
  • c30d808 docs: Update README
  • f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063)
  • 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067)
  • Additional commits viewable in compare view

Updates lint-staged from 16.2.7 to 17.1.0

Release notes

Sourced from lint-staged's releases.

v17.1.0

Minor Changes

  • #1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

    Before:

    Size of node_modules/ after installing: 1561.7 kB with 29 packages.

    Fancy interactive spinners, but output dynamically changes:

    ✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...

    After:

    Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

    Simpler but more explicit output:

    ⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!

Patch Changes

  • #1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

  • #1818 efb23a2 - Console output colors are enabled/disabled more consistently.

  • #1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

... (truncated)

Changelog

Sourced from lint-staged's changelog.

17.1.0

Minor Changes

  • #1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

    Before:

    Size of node_modules/ after installing: 1561.7 kB with 29 packages.

    Fancy interactive spinners, but output dynamically changes:

    ✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...

    After:

    Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

    Simpler but more explicit output:

    ⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!

Patch Changes

  • #1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

  • #1818 efb23a2 - Console output colors are enabled/disabled more consistently.

... (truncated)

Commits
  • dd5a95f Merge pull request #1817 from lint-staged/changeset-release/main
  • aad7f3b chore(changeset): release
  • 11b1d5c Merge pull request #1818 from lint-staged/fixes
  • efb23a2 fix: enable colors globally based on option
  • 26112a1 fix: function task failure kills other tasks, unless --continue-on-error wa...
  • 9b98b7f fix: handle error when calculating hash of unstaged changes
  • d43432b fix: do not allow NaN concurrency
  • bd4dcbf fix: do not drop backup stash when restoring unstaged changes fails and using...
  • 9153a77 Merge pull request #1816 from lint-staged/replace-listr2
  • 290e618 refactor: use common identity function
  • Additional commits viewable in compare view

Updates markdownlint-cli from 0.47.0 to 0.49.1

Release notes

Sourced from markdownlint-cli's releases.

v0.49.1

  • Update markdownlint dependency to 0.41.1
    • Improve MD029
    • Fix module resolution under webpack
    • Update dependencies
  • Update all dependencies via Dependabot

v0.49.0

  • Update markdownlint dependency to 0.41.0
    • Improve MD022/MD028/MD035/MD042/MD051/MD060
    • Remove handling of inline directive syntax (frequent false positives)
    • Remove support for end-of-life Node version 20
  • Update all dependencies via Dependabot

v0.48.0

  • Update all dependencies via Dependabot
Commits
  • 5b5dddc Bump version 0.49.1
  • 4e83bdd Bump run-con from 1.3.2 to 1.3.3
  • 4f2127b Bump actions/setup-node from 6 to 7
  • cc62492 Manually address new violations reported by xo.
  • 678b7ee Bump xo from 3.0.2 to 4.0.0
  • 06602e9 Bump ignore from 7.0.5 to 7.0.6
  • eac32dd Bump markdownlint from 0.41.0 to 0.41.1
  • 2864eb0 Bump js-yaml from 5.2.0 to 5.2.1
  • 2748661 Bump markdown-it from 14.2.0 to 14.3.0
  • 0144ebe Manually address new violations reported by xo.
  • Additional commits viewable in compare view

Updates npm-package-json-lint from 9.1.0 to 10.4.1

Release notes

Sourced from npm-package-json-lint's releases.

v10.4.1

What's Changed

🙈 Fixed

🧹 Chores

🎁 Other

... (truncated)

Commits
  • 7c77437 fix: Path to types (#1848)
  • 4c79057 build(deps-dev): Bump @​types/node from 25.9.2 to 25.9.3 (#1846)
  • e4f57c5 build(deps): Bump semver from 7.8.3 to 7.8.4 (#1845)
  • 8477e95 build(deps): Bump shell-quote from 1.8.3 to 1.8.4 in /website (#1843)
  • 5517d9d build(deps-dev): Bump prettier from 3.8.3 to 3.8.4 (#1844)
  • 3efa82a build(deps): Bump semver from 7.8.2 to 7.8.3 (#1842)
  • f596e27 build(deps-dev): Bump @​types/node from 25.9.1 to 25.9.2 (#1839)
  • 6407138 build(deps): Bump semver from 7.8.1 to 7.8.2 (#1838)
  • 0672bdb build(deps-dev): Bump tsdown from 0.22.1 to 0.22.2 (#1837)
  • 6d4f4a6 build(deps): Bump the react-dependencies group (#1836)
  • Additional commits viewable in compare view

Updates prettier from 3.9.4 to 3.9.5

Release notes

Sourced from prettier's releases.

3.9.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.5

diff

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text
1234567890123456789012) text
<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text
1234567890123456789012) text
<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text
1234567890123456789012) text

Markdown: Avoid corrupting empty link with title (#19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](https://github.com/prettier/prettier/blob/main/<> "title")
<!-- Prettier 3.9.4 -->
[link](https://github.com/prettier/prettier/blob/main/ "title")
<!-- Prettier 3.9.5 -->
</tr></table>

... (truncated)

Commits

Updates stylelint from 17.14.0 to 17.14.1

Release notes

Sourced from stylelint's releases.

17.14.1

It fixes 4 bugs.

  • Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
  • Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
  • Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).
Changelog

Sourced from stylelint's changelog.

17.14.1 - 2026-07-20

It fixes 4 bugs.

  • Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
  • Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
  • Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).
Commits
  • cd66b03 Release 17.14.1 (#9397)
  • 7c30fc5 Refactor to replace void with undefined in union types (#9395)
  • 57c8d0e Fix rule-empty-line-before false positives for shared-line comments with `e...
  • 226f10a Bump @​vscode/windows-process-tree from 0.7.0 to 0.8.0 (#9392)
  • 13c3c5c Bump globby from 16.2.0 to 16.2.1 (#9393)
  • 6dafcf5 Document unknown-effort contributions (#9391)
  • 54c2bc8 Fix test for Yarn PnP with npm v12 (#9390)
  • 3e7eb56 Fix declaration-block-no-redundant-longhand-properties invalid background...
  • 438196e Bump postcss from 8.5.15 to 8.5.16 in the postcss group across 1 directory (#...
  • c1e1489 Fix quiet option to suppress report* warning reports (#9387)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): bump the lint-toolchain group with 6 updates
f820a14 
Bumps the lint-toolchain group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.7.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.2.7` | `17.1.0` |
| [markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli) | `0.47.0` | `0.49.1` |
| [npm-package-json-lint](https://github.com/tclindner/npm-package-json-lint) | `9.1.0` | `10.4.1` |
| [prettier](https://github.com/prettier/prettier) | `3.9.4` | `3.9.5` |
| [stylelint](https://github.com/stylelint/stylelint) | `17.14.0` | `17.14.1` |


Updates `eslint` from 9.39.2 to 10.7.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.2...v10.7.0)

Updates `lint-staged` from 16.2.7 to 17.1.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v16.2.7...v17.1.0)

Updates `markdownlint-cli` from 0.47.0 to 0.49.1
- [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases)
- [Commits](igorshubovych/markdownlint-cli@v0.47.0...v0.49.1)

Updates `npm-package-json-lint` from 9.1.0 to 10.4.1
- [Release notes](https://github.com/tclindner/npm-package-json-lint/releases)
- [Changelog](https://github.com/tclindner/npm-package-json-lint/blob/master/CHANGELOG.md)
- [Commits](tclindner/npm-package-json-lint@v9.1.0...v10.4.1)

Updates `prettier` from 3.9.4 to 3.9.5
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.4...3.9.5)

Updates `stylelint` from 17.14.0 to 17.14.1
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@17.14.0...17.14.1)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: lint-toolchain
- dependency-name: lint-staged
  dependency-version: 17.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: lint-toolchain
- dependency-name: markdownlint-cli
  dependency-version: 0.49.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: lint-toolchain
- dependency-name: npm-package-json-lint
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: lint-toolchain
- dependency-name: prettier
  dependency-version: 3.9.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: lint-toolchain
- dependency-name: stylelint
  dependency-version: 17.14.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: lint-toolchain
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 21, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 21, 2026 09:08
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 21, 2026
@vercel

vercel Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
example Ready Ready Preview, Comment Jul 21, 2026 9:44am

Request Review

@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Jul 21, 2026
This was referenced Jul 21, 2026
Closed
Closed
@sonarqubecloud

sonarqubecloud Bot commented Jul 21, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants